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a. I I (sent to the applicant and to the International Bureau) a total of 

[ I sheets of the description, claims and/or drawings which have been amended and are the basis for this report 

and/or sheets containing rectifications authorized by this Authority (see Rule 70.16 and Section 607 of the 

Administrative Instaictions). 
I I sheets which supersede earlier sheets, but which this Authority considers contain an amendment that goes 

beyond the disclosure in the international application as filed, as indicated in item 4 of Box No. I and the 

Supplemental Box. 
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[ I Box No. IV Lack of unity of invention 

(Vl Box No. V Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 

>^~^ citations and explanations supporting such statement 



[ [ Box No. VI Certain documents cited 

I I Box No. VII Certain defects in the international application 
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INTERNATIONAL PRELIMINARY REPORT ON PATENTABILITY 



International application No. 
PCT/KR2004/002874 



Box No. I Basis of the report 



With regard to ilie language, this report is based on the international application in the language in which it was filed, unless 

otherwise indicated under this item. 

\^\\ This report is based on translations from the original language into the following language Knglish 

which is the language of a translation furnished for the purposes of: 

I I international search (under Rules 12.3 and 23.1(b)) 

(Xl publication of the international application (under Rule 12.4) 

I I international preliminar>' examination (under Rules 55.2 and/or 55.3) 



2. With regard to the elements of the international application, this report is based on (replacement sheets which have been furnished 
to the receiving Office '« response to an invitation under Article 14 are referred to in this reort as "originally filed" and are not 

annexed to this report): 

the international application as originally filed/funiished 
I I the description: 



pages as originally fded/ftimished 

pages* received by this Authority on 

pages* received by this Autliority on 



I I the claims: 

pages as originally filed/fumished 

pages* as amended (together with any statment) under Article 19 

pages* received by this Authority on 

pages* received by this Authority on 



I I the drawings: 

pages nQ nri^innliy filed/fumished 

pages* received by this Authority on 

pages* received by this Authority on 



I I the sequence listing and/or any related table(s) - see Supplemental Box Relating to Sequence Listing. 



3. I I The amendments have resulted in the cancellation of: 

I I the description, pages 

I I the claims, Nos. 



I I the drawings, sheets 

I I the sequence listing (specify) : 

I I any table(s) related to sequence listing (specify) : 



4. I I This report has been established as if (some oO the amendments annexed to this report and listed below had not been 

made, since they have been considered to go beyond the disclosure as filed, as indicated in the Supplemental Box 
(Rule 70.2(c)). 

I I the description, pages 

I I the claims, Nos. 

I I the drawings, sheets 

I I the sequence listing ^5y:>ec/^^: 

I I any table(s) related to sequence listing (specify) : 



* If item 4 applies, some or all of those sheets may be marked "superseded. " 
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Box No. V Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 



1 . Statement 

Novelty (N) Claims Lzi YES 

Claims None NO 

Inventive step (IS) Claims YES 

Claims None NO 

Industrial applicability (lA) Claims > YES 

Claims None NO 



2. Citations and explanations (Rule 70.7) 

Reference is made to the following document : 

D1 : US 6584505 B1 (Microsoft Corp.) 24 June 2003 
( see abstract, figure 1, claims 1, 17, 27 ) 

D2 : US 6519647 B1 (Microsoft Corp.) 11 February 2003 
( see abstract, figure 6, claim 1, 10, 17, 23 ) 

Claims 1'-'4 of the present application relate to an apparatus for extranet access 
control, wherein a domain web server examines the authorization status of each 
domain by using ACKaccess control list), then AA(authentication and 
authorization) server authenticates and authorizes the encrypted role information 
cookie which is generated from the domain web server, then the authorization 
information storage module saves ACL and ACE(access control entry). 

On the other hand, the prior art D1 discloses a method for granting access to a 
network server by granting or denying access to the user according to whether the 
user is authenticated or not and the prior art D2 discloses a method for 
synchronizing access control in a web server wherein one or more of the security 
settings for one or more of the access control mechanisms are set when a security 
scenario is selected. 

But none of the above documents teach or fairly suggest the feature of present 
invention that comprises a domain web server, authentication and authorization 
server, and a authorization information storage module. 
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